Why does workspacefs exist?

[ConnorNelson]

Like seriously. The point is for the challenge to not be able to see into nix-land through the PATH, but why should a challenge ever trust the PATH? It's controlled by the user? If the challenge is going to do PATH resolution, it's going to do it on a trusted PATH, which just shouldn't include nix-land anyways. Why does this exist??

[spencerpogo]

If the multi-purpose setuid interpreter handles this, then it should make it easy for challenge authors to do the right thing.